DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b3d764c60bd25ace9e1d3549f2d5ae54_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b3d764c60bd25ace9e1d3549f2d5ae54_JaffaCakes118
Size
606KB
MD5
b3d764c60bd25ace9e1d3549f2d5ae54
SHA1
34f5bee8e1152b071500225583cce5fd41ccd8de
SHA256
41ba09d5185b17488ab81eca9b3f16659901e9551c0b14a034770bd7b52eb408
SHA512
83f00889b28db69d2e1fed6d64daec84f08949b15b7a9289fdf39203136a72358e80c65ce7bcdb3e2cd39367fe21f07477b80ba27086798c75596b6529b6b90e
SSDEEP
12288:TpIt9HX65cspWkY5DARyLuaIg3QaoErxBhUVpn/:TetFXsoB7LGnaoErxBhUVpn
Checks for missing Authenticode signature.
resource |
---|
b3d764c60bd25ace9e1d3549f2d5ae54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ